DocsOverviewQuick startSign inOn-premisesAPIChangelog

Changelog

What shipped, and when, across superfile.com, SuperSecure and SuperDRM. Dates are the day a change reached production.

#September 2026

  • 16 Sep — docs.superfile.com relaunched: one documentation site for the register, SuperSecure files, on-premises deployment and the SuperDRM API, replacing the previous template site.
  • 15 Sep — SuperDRM portal: account switcher across every tenant your sup identity can reach; production FairPlay certificates installed per tenant; phone layout pass on superdrm.com.
  • 13 Sep — Sign in with sup: sup.com is an OpenID Connect identity provider; superdrm.com and beta.supersecure.com accept it. Sup workspaces can bind a business domain so colleagues sign in with their work address.
  • 12 Sep — SuperDRM FairPlay in production: our own Key Security Module on Apple's FPS Server SDK 26, all 106 of Apple's test vectors passing, production credentials issued. SuperSecure's Safari and iOS viewers moved to it the same day.
  • 12 Sep — SuperDRM self-service: sign up, email verification, domain verification, team roles, plans with included licences and overage, 429 quota_exceeded, master admin console. superdrm.com live.
  • 12 Sep — SuperDRM attested devices: TPM-backed boot attestation as a licence policy (attested), proven against a real firmware TPM.
  • 11 Sep — SuperDRM launched: Key Protect (/v1/keys, CPIX 2) and the License Service (Widevine, Clear Key; FairPlay bridge), bring-your-own-key import, per-attempt metering, PKCS#11 and AWS KMS vaults, Docker Compose / Helm / systemd packaging, SUPERDRM_MODE=onprem with signed install licences and usage reports, export / import / verify-kek with a rehearsed server migration. SuperSecure's Widevine licences moved to it; every historic key backfilled.
  • 3 Sep — SuperSecure delivery pipeline: fix/** branches merge through the integrator again; four health commands for the lanes.

#August 2026

  • 21 Aug — the next superfile.com (the story homepage, mission and SuperSecure pages) opened behind a gate at wave4.superfile.com.
  • 20 Aug — SuperSecure first-touch proofs: the invite gate, sign-up, the share door and Discover, walked in one browser and re-run on every deploy.
  • 17 Aug — Registry verification gate: an unconfirmed free hold passes its window after 24 hours, is reminded, and is released lazily only when someone else claims the name. Paid and invited holds are never released.
  • 14 Aug — Sup calls: one-to-one voice and video (WebRTC) shipped in beta.
  • 10 Aug — SuperSecure sign-out and multi-account hardening: one sign-out path, whitelist-based erase, automatic migration of pre-sign-in drafts into the vault.
  • 6 Aug — superfile.com Where you're signed in: per-device sessions with location and last activity, per-device sign-out, sign out all other devices.
  • 5 Aug — Accounts v3 on SuperSecure: an account is an account; plans Free / Individual / Business Core / Enterprise Core / Institutional; organisations with verified domains and seats; the append-only billing ledger.
  • 2 Aug — Transfers: hand a name or extension to another person for free; the free @name is one per person, for good.
  • 1 Aug — superfile.com dashboard rebuilt around the identity card; the matching-extension offer and basket on the reservation page; the 6-digit confirmation code on every reservation path.

#July 2026

  • 28 Jul — SuperSecure hardware DRM on for every browser: Widevine, FairPlay, Clear Key fallback; unsharing kills playback on the next key request.
  • 25 Jul — superfile.com launched on the new site (Next.js, DB-driven pages, Page Admin). The previous site retired.
  • 16 Jul — Stripe live: extensions at $100 each, charged at checkout. Waitlist waves console.
  • 7 Jul — superfile.com customer-story showcase; the Learn page.

Updated September 2026